Compare Files

[mp1256]

Hello,
recently the files of a customer were renamed and encrypted by a cryptolocker ransomware.

To recover these files I wanted to use BC4 in folder-compare-mode with an alignment override, but i didn't got it working.
One sample file name would be the following:
unencrypted: abc.txt
encrypted: abc.txt.id-F8C2FDE8.[[email protected]].wallet

For future use it would be nice to know how to configure the alignment override correctly.
Thanks in advance!

[Aaron]

To align these two files, the encrypted file has to be on the left side. Use Swap to make that side the Left base folder.

Then go to the Session menu -> Session Settings, Misc tab (Pro feature), and create a New (+) Alignment Override.

Define left as (.*).id-(.*)
and Define right as $1